Yubico Forum

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2016-02-05T13:37:03+01:00

Is there any way to restore keys into Neo on this way?
Apparently bkuptocard doesn't work with backups created the above steps though.

Statistics: Posted by tagoh — Fri Feb 05, 2016 1:37 pm

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2015-10-18T16:49:09+01:00

Quote:

Nevermind, here's a solution: http://www.derekkozel.com/blog/2014/12/ ... .markdown/

Link is dead, use this one: http://www.derekkozel.com/blog/using-an-openpgp-card/ (note: The code on that site was corrupted, so you can't copy/paste. See bug on GitHub for more info)

Unfortunately these steps have not solved the issue for me yet... (I will study further).

Statistics: Posted by jcross — Sun Oct 18, 2015 4:49 pm

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2015-10-16T18:36:19+01:00

FYI, on Ubuntu 14.04 LTS the following fails:

Code:

# aptitude install libyubikey-dev

With message:

Quote:

Couldn't find any package whose name or description matched "libyubikey-dev"
Couldn't find any package whose name or description matched "libyubikey-dev"

Statistics: Posted by 123810 — Fri Oct 16, 2015 6:36 pm

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2015-05-08T19:23:00+01:00

dilsha21 wrote:

anhur wrote:

jsqliu wrote:

Hi I'm hoping to get help importing a GPG key into my Neo. The gpg command "addcardkey" is working for me but "keytocard" leads to "gpg: error writing key to card: not supported". Some details of my system:

Ubuntu 14.04
Yubikey Neo bought this year, firmware v3.3.0, OTP+U2F+CCID mode
libykpers-1-1 v1.17
gpg2 v2.0.22
gpg v1.4.16

The following command from the tutorial (https://developers.yubico.com/ykneo-ope ... mport.html) is also not working for me

$ gpg-connect-agent --hex "scd apdu 00 f1 00 00" /bye
ERR 103 unknown command

I am having the same exact problem over here. Anybody have any tips?

Still a problem and it's 2015. I have been Googling constantly and I can't find a solution. My OS is Linux Mint 17 Cinnamon 64-bit and everything else but my OpenPGP applet works.

Nevermind, here's a solution: http://www.derekkozel.com/blog/2014/12/using-an-opengpg-card.markdown/

Statistics: Posted by dilsha21 — Fri May 08, 2015 7:23 pm

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2015-05-08T19:10:00+01:00

anhur wrote:

jsqliu wrote:

I am having the same exact problem over here. Anybody have any tips?

Still a problem and it's 2015. I have been Googling constantly and I can't find a solution. My OS is Linux Mint 17 Cinnamon 64-bit and everything else but my OpenPGP applet works.

Statistics: Posted by dilsha21 — Fri May 08, 2015 7:10 pm

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2015-04-27T09:24:35+01:00

jsqliu wrote:

I am having the same exact problem over here. Anybody have any tips?

Statistics: Posted by anhur — Mon Apr 27, 2015 9:24 am

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2015-04-07T16:11:06+01:00

Statistics: Posted by jsqliu — Tue Apr 07, 2015 4:11 pm

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2015-01-09T13:16:15+01:00

Neal wrote:

[color=#FF0000]
You can now backup the private key from your computer (which only contains a stub of the full private key). This stub and the public key you saved earlier can be manually imported on any other computer without risking loss of control of your keys as you also need the Yubikey connected to use it.

Somehow I ended up with the stub key having a E (encryption) meaning that parties emailing me might use the E-stub-pub-key in stead of the E yubikey-pub-key

pub 4096R/32A6E903 2014-04-11 [expires: 2039-04-05]
Key fingerprint = 3C27 50BA F9D6 390E 2F7C 3C6B EDB4 E7BE 32A6 E903
uid Mark Bergman
sub 4096R/C939563E 2014-04-11 [expires: 2039-04-05]
sub 2048R/5EA8AE80 2014-04-11 [expires: 2017-04-10]
sub 2048R/B6E945E2 2014-04-11 [expires: 2017-04-10]
sub 2048R/DAC6EE43 2014-04-11 [expires: 2024-04-08]

I'll go ahead and revoke the C939563E key and beg the rest keeps working

gpg --edit-key mark@b##nospam##n.nl
gpg (GnuPG) 1.4.12; Copyright (C) 2012 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

pub 4096R/32A6E903 created: 2014-04-11 expires: 2039-04-05 usage: SC
trust: unknown validity: unknown
sub 4096R/C939563E created: 2014-04-11 expires: 2039-04-05 usage: E
sub 2048R/5EA8AE80 created: 2014-04-11 expires: 2017-04-10 usage: E
sub 2048R/B6E945E2 created: 2014-04-11 expires: 2017-04-10 usage: S
sub 2048R/DAC6EE43 created: 2014-04-11 expires: 2024-04-08 usage: A
[ unknown] (1). Mark B##nospam##n

Statistics: Posted by xychix — Fri Jan 09, 2015 1:16 pm

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2014-08-15T07:57:29+01:00

thanks for the clarification and the offer.

Statistics: Posted by hqarrse — Fri Aug 15, 2014 7:57 am

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2014-08-15T07:27:58+01:00

Dear Hqarrse,

That is our fault, please contact support@yubico.com and ask them to send you a new Yubikey NEO. However, you will have to ship your current Yubikey NEO back to our facilities. You will be provided with a OpenPGP apple version 1.0.6

Best Regards,
Tommaso.

Statistics: Posted by Tom — Fri Aug 15, 2014 7:27 am

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2014-08-15T02:12:10+01:00

Apologies - I was in the wrong tutorial.

You are right I don't have >= 1.0.5, but 1.0.4.9. Last question the - I hope - before I attempt to upgrade, is that actually possible on a 3000000+ Neo? Or do I need the development version?

Thanks

Statistics: Posted by hqarrse — Fri Aug 15, 2014 2:12 am

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2014-08-14T12:36:31+01:00

gpg-connect-agent --hex "scd apdu 00 f1 00 00" /bye

Please follow this tutorial before posting:
http://opensource.yubico.com/ykneo-open ... mport.html

Statistics: Posted by Tom — Thu Aug 14, 2014 12:36 pm

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2014-08-14T10:16:42+01:00

I'm having some trouble with this. I've tried the Windows Neo Manager (blank box for installed apps), plus the Linux command line tools. The most promising of these gives:

ykneomgr -a
error: ykneomgr_authenticate (-4): Backend error

How would I find the app version?

Statistics: Posted by hqarrse — Thu Aug 14, 2014 10:16 am

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2014-08-14T08:42:58+01:00

Can you verify applet version >= 1.0.5

Statistics: Posted by Tom — Thu Aug 14, 2014 8:42 am

Re: [HOW TO]Import your existing GPG key into a Neo from scr

2014-08-14T07:32:32+01:00

hi Tom,

it's a shiny new one (3000052)

Statistics: Posted by hqarrse — Thu Aug 14, 2014 7:32 am